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METHOD -^ OR COORDINATLMC NEXM O RK CQ M PO I 'TENT C 



Background In£ ormat - io rr . 

.p/ea-k of- -me niv&wTni 

The present invention relates to a method for coordinating or 

- fur adjusting netwo^ components, in particular master and 

slave components^ a^fe- least one first logical component and one 

A JL5 

second logical component / being provided, each of which 
corresponds to a specific application and ^whioh can 
communicate with each other via the network on a 

<xKJ 

communications plane that is essentially independent of -fcfee*. 
application plane^ fl^j &&^))ogL \f\ t><" ^ax<A^ ^ublpLxA ^fc^ 

Tne^/invention can be applied in wide areas of communications 
technology, but it is explained in greater detail, by way of 
example, only in relation to a CAN network system for use in 
the automotive area. 



In systems of this type installed in a motor vehicle, there 
often arises the situation that only individual components of 
the network system carr^/ out a restart, i.e., reset, in 

or -f^ol-f- 

response to a failure. A typical trigger for a reset of this 

A 

type is the detection of an undervoltage condition, which can 
vary from component to component. 



From this arises the fundamental problem to define specific 
communications mechanisms between the components, in order. to 
achieve a restarting of the distributed applications as 
rapidly as possible. In this context, it is generally 
advantageous -a-s — far as possible s to reproduce or « s fee- coordinate 
the state of the entire system before the reset. This is of- 
particular significance for systems that have user 
interaction, for example via a display and operating element, 
in order to minimize the disturbances triggered by resets 
during operation, such as images on a display that are no 
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longer current, delays in the servicing of components, lost 
inputs, etc. 

The problem underlying the present invention thus generally 
lies, in a network having distributed applications, in 
effectively coordinating the network components, corresponding 
to applications. This applies specifically to a restart after 
a failure in individual components. 

In general, the following four cases must be detected and 
treated appropriately. 

"Normal" start-up of all components (system start)** 

ii) Simultaneous failure in all components after systems 
start, e.g., as a result of an undervoltage for all components 
in the network^ • 

A 

iii) The failure in a partial system after system start, i.e., 
a failure condition in one or a plurality of component s>*-attd- 

iv) A hardware reset after a first power-on or fatal failure. 

First, the specific problem of a reciprocal coordination or 
synchronization of distributed applications and the logical 
components that correspond to the latter will be explained in 
greater detail. 

In systems in which components communicate with each other via 
a network, for example, a bus system, a specific basic 
prerequisite for the method described here is a separation of 
communication and application within one component (see ISO 
7490, Information Processing Systems -- Open Systems 
Interconnection Basic Reference Model, 1984). 



At issue here are systems that communicate via a network, 
e.g., a bus system, communication and application being 
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defined as follows. 



Communication denotes all functions that are required for the 
purpose of reliable data exchange with other components. 
Typically, a stratification is used that is derived from the 
OSI model of the ISO (see above), i.e., the conversion from 
the physical layer to the application interface. For in the 
current approaches in the automotive area, only one subset of 
the OSI model is used, adjusted to the requirements of this 
application area, i.e., some layers remain "empty." 
Furthermore, as an expansion of the OSI model, a network 
management that includes the different layers is usually used, 
synchronizing the different components with respect to 
communication . 

- By application x-u- meant - the specific task of each component, 
e.g., the functionality of the CD player or the various 
functions of a car telephone. 



In systems having at their disposal logical point-to-point 
(1:1) connections between the individual components, the 
"commands" of the application of a component A are relayed to 
component B via a connection of this type, component B then 
responding, e.g., with an application acknowledgment. An 
example is the activation, using an operating element, of a CD 
changer to play. 

Advantageously, these 1 : 1 connections of the application plane 

are reproduced in the 1 : 1 connections of the transport layer 

(layer 4 in the OSI model). While the 1:1 transport 

connections can be set up or, in the case of failure, reset by 

both participating components, which corresponds to a 

symmetrical method, this does not apply to the application 

plane. Here, for example, only one component A -- the "master" 

is entitled to control one component B -- the "slave." This 

~is especially true for switching the main states of the slave, 

« €moh c±s lf, on" and "off." 
K 
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Advantageously, a system of this type is based on network 

management, which also distinguishes between master and slave 

functionality. In this case, an "application master" is 

usually also simultaneously a "network management master." In 

f) j 5 addition, however, systems are -ffi ji^o' cohce ^rrrate^re- that, in 

network management, recognize only equal-access stations, in 

which therefore the master/slave distinction is limited to the 

application plane. A typical example for the latter network 

management method -ea fee- found in the — be«a* "decentralized 

A. 

network management, " on CAN networks in the chassis area of 
the automotive industry. 

Unless otherwise expressly stated, in what follows the 
designations "master" and "slave" always apply to the 
application plane. 



Therefore, a relatively simple system is composed of one 



aiy simple syst 

Mrm¥/ of ci 



(X^/ master and - ©no — or"a l ^uraTxtry of claveo , employing in each 

-n K 
y case a 1:1 connection between master and each slave. Of 

s20 course, more complex systems can be constructed, that are 

5~ composed of a plurality of master components having the same 

pj or even different slaves. In this context, however, the 

% assumption is that for every logical connection, it is 

C3 unambiguously m established, which component is the master and 

Q—2?b which^tne slave. In this manner, a hierarchical system can 

then be formed, out oL master, A sub master (s) , .and slaves, as is 

ft f described in Lin pii ui application e OTltr^^TpafeoPpfc. 196 373 12. 

A- 

Usually, the master is largely responsible for the 
30 coordination of network-wide applications. For the slave, it 
is sufficient to detect the reset of the master, for example, 
via a network management service. 

For the slave, this leads, for example, to the initiation of 
^_35 certain emergency functions or— e^b^e**- to an autonomous shutdown. 

The master detects the reset of the slave component either 
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through a cyclic querying of the slave status or through a 
fresh communication set up, initiated by the slave (e.g., a 
communication system having network management and a transport 
) protocol in accordance wifeh the prior applications, German "wi<&[4 

,5 Ml^Tl^i 133 or 373 12). ^ 



Jn tho aDove-Tnent xpneg ane e 



j Jn tho apovo-Tnent ipneo app r oach, — tfee — fact haa been proven to 



-fee* disadvantageous cyclic querying of the slave 

status by the master is cumbersome and communications- 
10 intensive, since usually no change of status is present. 

Furthermore, this querying mechanism is inflexible, since 
generally only components are queried that have already been 
installed . 



4f5 Finally, a fresh communication setup by the slave, as an 

yi alternative to the above cyclic querying mechanism, brings 

with it the disadvantage that, except for the information that 

ikl the communication has again been "QcniGVG^ rhe master receives 

T no messages concerning the cause of the reset and/or its 

*20 prehistory, i.e., by way of example, the previous application 

O 



status • 



I* The type of local reset can be detected by the master, e.g., 

O through the entry of local status information into a non- 

25 volatile memory, such as an EEPROM, and through evaluation of 
the entry at a subsequent restart. 

If, after a reset, the master, for example, discovers the 
entry, "system started and in normal operation," then it can 
30 infer a restart as a result of a failure condition. On the 

other hand, if "system is shut down" is entered, then it is a 
question of a normal startup. In the case of a failure, the 
problem is the limited memory possibilities in the master. 

35 In general, only the local status can be saved, since, for the 
status storage of all connected slaves, the time and/or the 
memory capacity is usually not sufficient. In addition, in the 
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event of a failure-reset of the master, having recourse to 
status information concerning the slave stored, for example, 
in an EEPROM is risky, since the slave could also have carried 
out a reset and thus the stored slave state deviates from the 
5 current state. 

Since, in the above standard approaches, no detailed and 
stored status information concerning the slave is available, 
the master will generally restart or initialize the slave 
10 application. 

Since, as a result, the previous settings generally must be 
reset, this signifies the loss of knowledge concerning the 
prehistory of the slave, i.e., the original operating state or 
& status of the application can no longer be derived. Noticeable 
y! delays generally result from the restart of the slave 

application. 

^r. - Advantages — of the — f iiveiiLiOii 

&lj In contrast to the knuw ^ap^oach^ the. jnethod .according to the 

. .A _ _ f^2^)ni/^nifyo 

■i nvention having tne — fcat - c rres or dtHnft — ;u has tne advantage 

A- 

~ that it can efficiently reinstate the prior application state 

C3 (application status) , for example of a slave, before the 

25 occurrence of a failure at any point in the network. 

In this manner, it is made possible, for example, to carry out 

a reset, i ^appropriate, only locally at the slave in 

■ qu^^^on^* tne ^Qset^o^boing . noticed by the user of the 
A*. 

30 system -- for example, an automobile driver — , since a global 
reset can be dispensed with. 

Through the controlled reset of the slave that has failed for 
a short time, there generally results a time advantage in 
35 comparison to the usual approaches, in which all running 
applications must be initialized once again. Furthermore, 
additional possibilities for network-wide diagnoses are 
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itchdog telegrams -i ^JsA^fe--HTso , for example, a 

by the master, can in turn be used as 
Fr proceeding from the master for this connection 



10 



Furthermore, this trigger can also be grounded in the slave. A 
typical example is the waking up of a network by a telephone 
component- In this case, the initiative to the connection 
setup proceeds solely from the slave. 



M 

PJ 

B 
25 



30 



CO 



■ In the subcla -ims-, — fck-e^c can b a — found advantageous r of inomontb - 
■ and improvements of the meth edr--±i^±rc^t"ed irr^e iaim 1 - ^r 



In accordance with 



l ^ pi cI eiiuCf leliiiemenL, the informati 



on of 



the transmitted .information message -ts — s - torod - in the first 

logical component in tnenon-volatile memory. 

k 



According to a further -j&ge£e.rTtiPn rpf inPTneffc, the first logical 
component uses the information of the transmitted information 

4 

message to reconstruct the state before the setup of the 
communications connection . 



■ According to a fuiLhei pi? of erre d ref ine ment, — th u inf ui 4a a.t i.afe 
message contains information regarding the iniiira^Tve to set 
up the communications con; 




According to a 
se 

each oLhei- 



^rrjsd refinement, the first and 
stand in a master-slave relationship 



p - re - f eriWid i of lncmeii r, the 



35 



According to a further r p - re - feri^d i cf incm errtr^f he information 
message, after a reset in an application that has already been 
started, is transmitted to at least one of the first or the 
second logical components. 



^3 / According to a further preferred rcf inc fflerrtr; — Lhe inf u rffi a^-4-o. 
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— magciagp mni-^i-^ — i v i fn i n i ri t* i hv i rnn n r m i n g v/hnth r r th^ q pr^n ri — - 
component has carried out a hardware reset. 

According to a further preferred refinement, cerjva^n 
information that becomes the content of the^Tnf ormation 
message is stored in a non-volatile memp^y of the second 
logical component. 

According to a further p2fe^rred refinement, the content of 
the non-volatile memory^^f/lthe second logical component is 
actualized in each^6ase{>tnaK-_a^change of the application 
status of the ^sr^cond logical component arises. 

According to a further preferred refinement, the information 
massage contains further information regarding the prehistory 
K)£ Lhe second Compor renfe^ 



Particularly ■ ■preferred a pplications of the method according to 
the invention lie in measuring and/or monitoring systems, in 
automobile on-board information systems, and in network-wide 
failure location and/or failure diagnoses of network 
components of systems of this type. 
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^F igure 2 depicts th e — tempora l cuuise ul Lhe iiieLliud accord 

to the invention in accordance withtiiJ©---^Trfst" 
embodiment, proves sin^J^eitipSTally from top to 
bottom in ajwfoy the slave as a consequence of 
an uftiiervo 1 1 ajc 

^r-n pi- -i on— — the Exempl d ' r y— Embod irmerrt-g 

Figure 1 depicts a schematic representation of the 
participating network components in accordance with a first 
embodiment of the method according to the invention, namely a 
master, which is connected to a slave. 

- I - n u Figure 1, — reference numeral 1 designates a ladio " , — 2— a-—G£) 

changer a communications connectioi^between radio 1 and CD 

V two A. jTcT 

changer 2, and 5 each cr non-volatile memory. 1 1 ^ 

K A 



t- ster *e 



The relatively simple system contains radio 1 as iftact o r 'a - rrd r 

Tonnec-^ CD changer 2 as slave of radio 1 and a 
K- J 

communications connection 3 connecting both network components 

1, 2 to each oWhj^r, in the form of a bus line. In addition, 

both radio 1 <xa wo 1 4 as- CD changer 2 have at their disposal 

non-volatile memory 4 and 5, respectively, which could be 

realized, for example, in the form of buffered SRAMs or 

EEPROMs. Memories 4, 5 function to store data, whose 

evaluation by master 1 functions to coordinate network 

components 1, 2. 



Figure 2 depicts, in schematic form, the temporal course of 
the method according to the present invention in accordance 
with the first embodiment, progressing temporally from top to 
bottom in a reset of the slave as a consequence of an 
undervoltage . 



In Figure 0 dci^iynatu - fep a watchdog telegram, i.e., a request 
of radio 1 to CD changer 2, to set up or maintain a 
communication . 



NY01 284235 



10 



The left exterior line represents application interface 1A of 
radio 1, the second line from the left represents 
communications interface IK of radio 1, the third line from 
QlJ the lef t^oi^mnTcations interface 2K of CD changer 2, and the 
£_J)5 right exterior lin^^lp^fi^ation interface 2A of CD changer 2. 

(D In the beginning, and in - the Figure above t lf the system is 

A. 

initialized and both components, radio 1 and CD changer 2, are 
in operation. In CD changer 2, its status, for example, 
10 "Play," is stored in non-volatile memory 5. From radio 1, 

watchdog telegrams 6 are cyclically transmitted to CD changer 
2 . 



At time point t 1 itself, an operational breakdown occurs, here 

Ijs an undervoltage in CD changer 2, which makes a reset of CD 

|] changer 2 necessary. As soon as this undervoltage is detected 

Lg, as such, in addition to the already stored current application 

lr state "Play" of CD changer 2, the desired further information 

El concerning its prehistory, e.g., "failure in slave," as well 

*20 as the last position of the CD scanning system, is stored in 

y 

Oj its non-volatile memory 5. 

Jjfi re^5Xs^ 

-i n thi s — regard, — it — should be also explained that in rosponco ^ 
to an undervoltage arising in a component, the supply voltage 
25 in general does not fall to zero volts. The reason for this is 
a buffering of the supply voltage. In response to light 
undervoltages, certain measures can be initiated for saving 
current data in the non-volatile memory (if available) . 
Cl^y Associated with this is usually a raset ~of~,the application 
CL30 and/ or -erf- the communication (e.g., °m^ftafttl Mre* o f the logical 
connections) . If the voltage once again increases, then the 
application and, if appropriate, the communication must be re- 
initialized ("warm start"). 

35 In this context, initialization of the application signifies a 
preparation of the application and, if appropriate, a start of 
the application (generally no autonomous application start in 
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a slave)*. The initialization of the communication signifies 

the "C&rryirig^ o ufo of preparations for communication with other 
A. 

network components, e.g., a connection setup. 

Only if the supply voltage falls below a critical value is 
there a danger of a hardware reset of the microcontroller as 
well as the loss of all data in the volatile memory (RAM) . 
After a hardware reset, the components must carry out a etr~ 
■ colled "cold start, " in which, generally, a specific 
initialization routine must be traversed. A basic 
initialization of this type relates to the components on the 
lowest plane, e.g., setting/re-setting of the pC ports, etc. 
If, for example, in this routine, a flag is set in RAM, the 
possibility exists of distinguishing a cold start (loss of all 
data if no non-volatile memory is available) from a warm start 
(partial loss of data) . The concept x reset' should therefore 
not be equated necessarily with a hardware reset of the 
microcontroller . 

CD changer 2 at t 2 now receives a watchdog telegram 6 from 
radio 1 and consequently sets up the connection to radio 1 
again . 

At t 3 , radio 1 acknowledges the connection to CD changer 2 . 
Connected to this is a re-initialization of the communications 
connection in radio 1. 

At t 4/ CD changer 2 — b**e«- transmits the information message, the 
start-up info, to radio 1. Radio 1 processes this information 
message^and^ as a consequence, transmits to CD changer 2 at t 5 
the appropriate application messages to restore the previous 
state before the occurrence of the undervoltage, for example, 
the commands "switch on" and "play." Thus the state is 
restored in which the system was before the onset of the 
undervoltage, disturbing the system. 



As support for the functional sequence described here, it 
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should be noted that as a rule it is not useful that the slave 
attempts on its own to restore its prior state completely. The 
baokgjMund r reason is that it is possible that a failure has 
occurred in the master as well (or in another, Hr«?e> 
undepicted, component) , so that the various applications are 
no longer synchronized. For example, it would not be sensible 
if the CD changer were to restore its prior state "play" 
autonomously, but the radio, as a result of its internal 
reset, were no longer to process the audio signals of the CD 
10 changer. 

The essential content of the information message, "start-up 
^) info, " is the current application state of CD changer 2 or *erfT 

the slave, to the extent that the content is significant for 
%5 the operation of CD changer 2 from the point of view of radio 
-HI 1 or ^ the master. Significant application main states, from 

the point of view of this master, are, for example, on/off, 
^> i.e., they indicate to radio 1 whether the slave application 

is available for the master - or ao - tr . 

jj{ However, other specific application states can also be 

PJ activated and, accordingly, reported to the master, such as 

the restitution of a CD changer (play) in the present 
exemplary embodiment or perhaps a diagnosis mode. 

25 

Further specific states of the slave can denote that the slave 
possesses only a limited functional scope, since, for example, 
the application software must still be loaded from a CD-ROM or 
because a locking of the slave exists on the part of other 
30 logical connections, as was mentioned above. 

Likewise, diverse states of the human-machine interface of the 

^2 * slave can be displayed to the master i n -auuh a uiatt ftejr, for 

A) example, menus or windows on a screen, or the current layout 

A. 

35 of the softkeys in the system. 



An optional constituent component is the -&e^c3T3re^ 
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initialization initiation. This is a constituent component 
that indicates who ultimately has initiated the setup of the 
communications connection . 

5 This initiation can be grounded both in the master as well as 
in the slave. In the first case, which represents the normal 
use and underlies the above example, the master provides the 
initialization initiation, e.g., through a network management 
mechanism in the f orm ^f ^ a ^a^chdog telegram. An example for 
$JlO the second case is a making up - lavo , which, for example, 

is triggered by the ^bnnection-setup-telegram of the slave. 
Based on the transmitted information "initialization 
initiation by the slave, " the master in the latter case can 
interpret the unexpected communication setup by the slave as a 
5 wake-up and can distinguish it from failure cases. 



A further optional constituent component describes the 
prehistory of the application. In this case, the session was 

p 

ended by a failure, resulting in a reset of the communication 
^JpO as well as of - " the application due to the occurrence of an 
m undervoltage of CD changer 2. Therefore, the constituent 

Hi component has the meaning "failure in the slave," and can be 

: =1 signaled by a flag or another sign. 

■sh:p 

25 In another case, if the application in the prior session, 

i.e., in the prior contiguous time period having a valid 1:1 
connection between radio 1 and CD changer 2, was abandoned 
normally, for example, through a switch-off command, the 
content of the constituent component could have the meaning 

30 "OK." 

If CD changer 2 is on the network for the first time, then the 
content of constituent component could have the meaning "new." 
A sign of this type is important for a basic initialization 
35 after a replacement or a re-installation, or for a diagnosis 
after a fatal failure. 
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In the transmission of the prehistory, it is important to note 
that the start-up info exclusively reflects the point of view 
of the slave. Only a comparison with the data stored in the 
master makes possible a final statement concerning the 
prehistory of the system. 

It is generally true that application and communication are 



reset during the operation. On the other hand, in the 
connected component, here radio 1 as master, only a reset of 
the communication is carried out. The reset is necessary to 
synchronize the 1:1 communications connection once again. The 
application of the master is normally not directly affected by 
the reset of other components. 

An initialization of the communication is therefore possible 
even without an initialization of the application. In a 1 : 1 
connection, in the case of failure, a reset of the 
communication layers takes place on both sides, whereas the 
application, for example, is reset only on one side. 

Thus the method is based on an automatic report of the slave 
to the masterA ^nj-ch 1 contains the current state of the slave 



component as well as its prehistory, initiated by a specific, 
unambiguous communications event. This can be triggered by the 
occurrence of the undervoltage in CD changer 2 or by the reset 
of CD changer 2 . 

On the basis of all start-up information of the connected 
slaves as well as the local data contained in nonvolatile 
memory 4 of the master, master 1 can now very efficiently 
reconstruct the prior application state after a failure. 

If the component, deviating from the exemplary embodiment, 
reports that it is new to the network, then a comparison with 
the stored data of the master indicates whether this component 
had a failure, for example, an extreme undervoltage, a fatal 
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equally initialized only in the component 




A 



software failure, or the like, which would be important, for 

example, for a system diagnosis, or whether it is truly new to 

the network. In this case, a specific configuration ^s ^^^ ^e o^ / 

A. 

-ee+aid-jo^erct^ which is explained further below in an exemplary 
embod 



liment^ G^ktcL OoOt^ 



In summary, the method according to the invention, in this 
exemplary embodiment, makes -pe-s t»ikl " e an event-oriented 
flagging or memory function of the component ntains the 

following mechanisms. ^ 



Immediately after the successful (re) setup of the 1:1 
connection to the master, as a first application message, a 
slave automatically transmits to every master associated with 
it a special information message having status information 
("start-up info") in the following cases: 

- after the successful local initialization or local reset of 
the communication layers and 

- after a successful reset of the communication layers by the 
master . 



In this context, it should be taken into account that 
fundamentally either -- master or slave can begin 
reciprocal communication independent of its hierarchical 
embedding in the overall system of the network. 

Since the prehistory can be derived from the master on the 
basis of the start-up info of the slaves, additional 
possibilities for a network-wide diagnosis are generated. 

In the following second exemplary embodiment, a further system 
A3 assumed, which * is composed of a master component of any 
type and two slave components of any type, and, in a further 
transformation described below, three slave components of any 
type. 
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Initially, in addition to the master, two further components 
A, C -- slaves of the master — are located in the network. A 
further component B is known to the master, but it is not 
(yet) connected. 

p The method according- to the invention can be described for 
qT) this system «f olio w -M*g- FTgure 2. 

Depicted by way of example is a network status table, stored 
10 in the nonvolatile memory of the master, having configuration, 
connection, and application states of the known slave. 



h.,3, 


known slaves 


network 
configuration 


connection 
status 


application 
status 


: 


component A 


* present" 


* connection 
set up" 


" application 
on" 


S 5 

is J? 


component B 


"not 

available" 


"no 

connection" 


"not 

available" 


E3 
m 


component C 


"present" 


" connection 
set up" 


" application 
off" 



m 



~ The network status table was kept as simple as possible for 

20 the purpose of better intelligibility. Normally, a table of 

this type contains far more information, e.g., configuration 

data for the individual connections. 

For reasons of simplicity, this example only cites the 
25 application main states "on" and "off" or "not available." In 
addition to the information in this network status table, the 
master also stores its own prehistory. 

In a modification of the aforementioned example ( reconnection 
30 of a slave) , the master, after a connection setup, receives 
the following "start-up info" from component B: 
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B to master: "B for the first time in the network, application 
state 'off . " 

The master, on the basis of this information, can start a 
special configuration sequence. The network status table then 
is changed as follows: 





known slaves 


network 


connection 


application 






configuration 


status 


status 


10 


component A 


^present" 


* connection 


* application 








set up" 


on" 




component B 


^present" 


* connection 


* application 


= =3. 






set up" 


off" 


il 
Wl 


component C 


"present" 


* connection 


* application 








set up" 


off" 



#5 From this time point on, the master is in a position to start 

I. 

|3 the application of component B and to control all available 

^ functions. 

'JJ In the following, an exemplary failure case is depicted. 

20 

In a further modification of the aforementioned system state, 
the master, after a fresh connection setup of components A and 
C, receives the following "start-up information": 

25 A to master: "A was already in the network, application 
'off 1 . " 

C to master: "C is in the network for the first time, 
application 'off 1 • 11 

30 

After a comparison with the stored information, the master can 
now once again directly reconstruct the prior state through 
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selected application messages {in this simple example, only 
one message is necessary) : 

Master to A: "Application 'on'." 

5 

Furthermore, the master can determine that component A has 
O^y uui'iitrd uLrtr a "warm start" and component C has even - ear - ricd ■ 

A- A. 

-errb a "cold start, " since component C is already present in 
the network. This data can be managed using special failure 
10 counters and can be evaluated by diagnosis software. 

Although the present invention was described above on the 
Q^) basis of 'piTdlyi i^exemplary embodiments, it is not limited to 
„ them, but rather can be modified in many ways. 

Is 

■jjjjj Thus the method according to the present invention can also be 

/M employed for more complex systems, in which the master 

- or a plurality of slave^ is in turn the slave of master on a 
higher plane. 

It is likewise applicable in systems in whi ch ^ c^ -»^ -S/^^ 
£g[^ ' plurality of b l av e a — is assigned to more than only one master. 
EJ 

Also, the method according to the present invention can be 
25 used in networks having client-server architectures, the 

client generally taking over a certain master functionality. 

Furthermore, in monitoring and failure diagnosis systems, it 
can, in principle, be used in many technical, networked 
30 devices. In particular, in the automotive area, the most 

various application possibilities arise, in this context, in 
failure monitoring and failure diagnosis by networked 
electronic control units. 

35 Similarly, the communications connections between the 
components can be realized by wireless connections. 
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first logical component, master (radio) 


2 


second logical component, slave (CD changer) 


3 


communications connection 


4 


non-volatile memory 


5 


preferably non-volatile memory 


6 


watchdog telegram 
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